PT-2018-6475

CVE-2017-17290

·

Publicado

2018-02-15

·

Atualizado

2019-10-03

Descrição por

CVSS 3.1
7.5
Alta
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Huawei TE60 version V600R006C00 Huawei ViewPoint 9030 versions V100R011C02, V100R011C03
Description: The issue is related to resource management errors in the LDAP clients of the affected devices. An unauthenticated, remote attacker may cause the LDAP server to not respond to the client's request, potentially leading to exhaustion of the LDAP client's connection resources due to improper management of LDAP connection resources.
Recommendations: For Huawei TE60 version V600R006C00, update the software to a version that addresses the resource management errors vulnerability. For Huawei ViewPoint 9030 versions V100R011C02 and V100R011C03, update the software to a version that addresses the resource management errors vulnerability. As a temporary workaround, consider restricting access to the LDAP server to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾